Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ZaAoi_x_4sZu1AiX2MN-PIe_-MY.roa
File: ZaAoi_x_4sZu1AiX2MN-PIe_-MY.roa (raw, json)
Hash identifier: 5mKJTfZcVyqXHdBYuo/hy7RDwVEPF3OlmkgfFmR/748=
Subject key identifier: 65:A0:28:8B:FC:7F:E2:C6:6E:D4:08:97:D8:C3:7E:3C:87:BF:F8:C6
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F89E245CDC2F1A3E7C5008A8085D2B7C8
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ZaAoi_x_4sZu1AiX2MN-PIe_-MY.roa
Signing time: Wed 22 Jul 2026 12:52:15 +0000
ROA not before: Wed 22 Jul 2026 12:52:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154132
IP address blocks: 82.109.102.0/24 maxlen: 24
87.82.235.0/24 maxlen: 24
87.85.252.0/24 maxlen: 24
194.242.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:e2:45:cd:c2:f1:a3:e7:c5:00:8a:80:85:d2:b7:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 22 12:52:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65a0288bfc7fe2c66ed40897d8c37e3c87bff8c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:11:00:38:d6:f0:fa:75:13:67:75:c6:15:2b:
cd:7b:0e:75:b2:3b:0b:00:06:26:a0:8a:a9:54:cf:
91:c7:1a:29:67:c4:13:8f:35:53:3e:29:9c:de:55:
d6:62:ee:e8:c6:b9:21:a2:c8:74:9b:15:bf:2b:f7:
20:78:76:fe:d8:b2:9b:76:00:50:27:03:c8:1c:28:
d3:64:26:c7:81:ef:7b:42:a2:f4:63:28:f4:8a:f0:
dc:65:a0:87:68:07:4f:ca:81:bc:84:8d:28:0e:3f:
32:6d:b2:c7:04:8a:bc:d9:7d:6d:f2:15:58:65:69:
1c:67:7e:27:6e:ca:33:72:e2:07:d3:ef:22:12:64:
a6:ff:f7:29:b7:eb:cd:86:4d:ae:48:04:13:08:85:
ea:ff:fb:13:66:8f:fc:dd:6b:e7:f4:92:e5:42:ec:
10:58:d0:7a:31:75:c7:7b:38:c9:d1:05:23:a0:8e:
f7:34:13:7a:9b:4d:70:aa:1c:a3:66:bc:19:c2:93:
57:e0:58:02:a3:e8:51:18:d9:a5:ca:0d:d8:10:08:
1a:5d:fe:6b:c6:3d:7d:bb:8e:62:ca:28:c5:a7:05:
c8:20:a4:1d:9e:af:93:3b:89:b2:ce:13:51:b6:24:
0b:a3:fc:a6:3c:f9:5d:5b:ff:30:31:cc:5b:a5:cb:
74:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A0:28:8B:FC:7F:E2:C6:6E:D4:08:97:D8:C3:7E:3C:87:BF:F8:C6
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ZaAoi_x_4sZu1AiX2MN-PIe_-MY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.102.0/24
87.82.235.0/24
87.85.252.0/24
194.242.135.0/24
Signature Algorithm: sha256WithRSAEncryption
34:13:09:b5:f2:34:f4:9f:46:95:21:70:83:0d:6e:49:d0:da:
c5:b8:7e:4b:84:49:79:b7:fa:e0:bb:26:41:a8:ab:12:1c:4e:
85:93:b1:62:bc:4e:9f:bf:25:98:29:a2:96:1c:c1:b7:85:04:
2d:af:92:46:39:4b:fd:03:18:99:26:37:59:cf:c1:fa:98:02:
41:10:0d:ec:07:d7:ca:c9:40:39:ac:dd:21:ab:8c:cb:53:b6:
ec:60:ee:90:7f:fd:2b:d2:10:bb:ee:d8:66:d3:a9:d7:07:45:
3f:ca:3f:ba:c2:61:a7:83:a9:ba:f7:d5:05:38:0b:fc:7a:8d:
70:c9:47:32:07:da:6e:1b:55:4a:a0:87:2b:31:d7:bd:e3:16:
21:8d:40:f3:98:ff:fc:d5:91:5c:1e:d3:49:e4:56:c0:d3:84:
50:2f:dc:69:04:20:a1:25:91:03:a6:32:8b:4e:b7:d0:ee:49:
9a:4e:86:28:a0:9f:35:44:97:a7:83:e6:4b:91:93:1c:94:91:
8f:65:6e:bd:ac:a7:10:3e:71:ba:e6:cb:06:67:c1:87:b9:b4:
d1:d4:e1:d4:d6:66:89:a1:22:2e:76:52:bf:d8:a5:bd:8f:4e:
e3:f0:49:2c:e8:eb:56:c2:6f:77:2c:2c:55:c7:a4:49:2d:83:
ae:87:8e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:02:43 2026 by rpki-client